Security & AI Governance Analyst

Ovative Group, LLC; Minneapolis (MN); On-site; USD 90,000 - 132,000; Full time

Benefits offered by this job

401k match

Top health insurance

Generous vacation policy

Frequent travel to MSP

Job summary

Ovative Group, LLC is seeking a Security Analyst to advance our governance, risk, and compliance program. You’ll own client security questionnaires end to end, build a reusable answers library, and conduct vendor security assessments.

The role includes SOC 2 operations, data privacy tasks, and developing AI governance capabilities. The ideal candidate is an excellent writer, highly organized, able to engage both technical and non-technical stakeholders, and excited about safe AI adoption.

Qualifications

• Two-year or four-year degree in information security, IT, business, or related field; or 3+ years of equivalent experience.
• 2–5 years of experience in a security analyst, GRC, IT audit, compliance, or similar role.
• Working knowledge of security and compliance frameworks such as SOC2, NIST CSF, or ISO27001.
• Experience responding to security questionnaires, conducting vendor assessments, or supporting audits.
• Familiarity with data privacy regulations (CCPA, GDPR, etc.).
• Hands-on experience using generative AI tools, and an interest in AI governance.

Responsibilities

• Own client security questionnaires end to end and maintain a reusable answer library.
• Conduct vendor security assessments for new vendors and renewals.
• Run SOC2 compliance operations, including evidence collection and audit support.
• Maintain the risk register and drive policy lifecycle through annual reviews.
• Support data privacy compliance operations (CCPA, GDPR) and data mapping.
• Operate AI governance processes: risk assessments, AI inventory, and policy controls.
• Manage security awareness training and phishing simulations.
• Coordinate and execute periodic user access reviews and reviews of third-party applications.

Skills

SOC 2 frameworks understanding

NIST CSF familiarity

ISO/IEC 27001 familiarity

Security questionnaire writing

Vendor risk management

Excellent written communication

AI governance interest

Security tooling awareness

Education

Degree in information security/IT/business

Tools

Vanta

Drata

SIEM

EDR

M365 Admin

Google Workspace security

Job description

Ovative Group, LLC is seeking a Security Analyst to advance our governance, risk, and compliance program. You’ll own client security questionnaires end to end, build a reusable answers library, and conduct vendor security assessments.

The role includes SOC 2 operations, data privacy tasks, and developing AI governance capabilities. The ideal candidate is an excellent writer, highly organized, able to engage both technical and non-technical stakeholders, and excited about safe AI adoption.